This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.mft File: B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.mft (raw, json) Hash identifier: Ne6kWsAp/SB13SDJg66EqYub//dhrDMl/3wA9qJI3cA= Subject key identifier: 79:55:6B:C0:C7:CC:57:75:AE:77:03:8F:3D:DC:00:39:80:CA:AD:9D Authority key identifier: B5:91:05:9B:6A:F2:F5:D6:6E:BB:D1:40:31:DA:23:E5:AA:FC:64:F7 Certificate issuer: /CN=B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7 Certificate serial: 106CCA2C69AF062E712F2BE779209A9FEF61A690 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.mft Manifest number: 0532 Signing time: Sat 20 Dec 2025 19:11:56 +0000 Manifest this update: Sat 20 Dec 2025 19:06:56 +0000 Manifest next update: Tue 23 Dec 2025 20:00:56 +0000 Files and hashes: 1: B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.crl (hash: pYtJr8krAlIc/8nWkPnCtDlRmwdte5v8EP1Rea2IYuw=) 2: 3130332e3135332e33342e302f32342d3234203d3e20313430343532.roa (hash: L+WYyxtBJBb4IPQAp+Phpn95Mr1s/ocDbq38zQ6JLtA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.crl rsync://repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 20:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:6c:ca:2c:69:af:06:2e:71:2f:2b:e7:79:20:9a:9f:ef:61:a6:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7 Validity Not Before: Dec 20 19:06:56 2025 GMT Not After : Dec 23 20:00:56 2025 GMT Subject: CN=79556BC0C7CC5775AE77038F3DDC003980CAAD9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d0:b5:58:bc:c0:48:9e:2b:35:8f:c9:36:5e: 05:63:0f:a9:1a:32:04:88:8a:fe:e0:5e:04:05:65: 4d:5d:94:b6:f2:85:86:e8:ad:71:03:f3:c5:01:9f: f6:78:3b:42:2d:ed:ac:7b:40:ab:cf:ea:d1:d5:1f: 33:26:31:8f:9a:44:72:15:97:f2:5c:19:e4:d6:a7: fd:de:bd:71:cf:cd:61:c0:af:e2:a0:d3:95:ea:8d: fb:d0:48:d1:38:2b:1a:e6:de:2d:9b:41:90:d5:51: 05:64:a6:0e:26:02:86:b8:bb:8b:d3:25:27:07:5b: 59:03:53:73:7e:3d:f6:e6:a6:f1:5f:4d:bc:03:9d: 45:66:96:5f:ba:22:aa:36:f3:e2:9d:2e:60:e5:8c: be:df:35:09:00:69:0d:25:d9:f9:9b:29:42:00:c0: 4a:e9:7b:2a:8e:88:43:92:dd:3b:f1:d3:6d:5e:c8: ed:41:35:a4:e4:a0:74:aa:be:bf:7c:a0:85:b4:c3: 6b:f6:bb:79:cd:b2:03:22:1b:d1:ce:e9:73:f1:d6: e9:27:62:19:d2:f9:b0:05:2a:43:43:8b:e7:fd:30: 46:d9:61:1a:a0:92:b0:61:e4:60:21:b3:2c:33:68: 5d:0a:1f:93:92:22:d8:d4:88:33:1e:39:bf:81:9e: 25:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:55:6B:C0:C7:CC:57:75:AE:77:03:8F:3D:DC:00:39:80:CA:AD:9D X509v3 Authority Key Identifier: keyid:B5:91:05:9B:6A:F2:F5:D6:6E:BB:D1:40:31:DA:23:E5:AA:FC:64:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:69:de:91:4b:4f:bf:3f:78:6d:1a:1a:49:18:af:49:33:28: a1:18:a2:c1:9d:e5:12:da:bb:25:96:9d:c5:81:9e:bb:15:48: cc:7b:a0:c3:ea:d7:17:92:9a:9f:97:ae:a7:18:92:31:f0:5f: 17:bf:0b:9d:31:15:d7:54:58:6f:83:b0:da:5f:f1:5c:0b:fe: 3d:78:e5:a3:6a:70:68:6c:80:0e:0a:d7:fa:b0:25:ea:16:89: 7b:f6:38:99:96:bf:35:64:03:d1:39:b1:d5:35:24:73:16:b6: 82:cd:0c:86:20:b9:a0:e1:03:3e:f4:5c:69:0e:c5:3c:e4:13: 60:ca:26:7f:6d:08:b8:53:98:6e:79:a9:ee:d6:82:87:a6:0b: b6:ec:e3:f6:b9:fb:0c:05:77:b3:2d:49:c9:87:c8:41:19:74: 6c:25:75:ff:43:87:a5:9a:f0:c8:92:88:37:ad:09:f3:ee:82: 71:a3:c0:f5:65:65:35:d6:fd:61:1a:64:9e:f2:de:4d:b0:e1: c4:a5:8e:0c:6a:28:c7:e2:c6:3c:5c:f6:8f:68:40:fb:6d:7b: 30:21:f7:0a:6d:eb:a0:e7:bc:f1:9c:1e:e5:b6:96:4b:4a:24: c6:25:2d:de:66:66:f6:05:93:b0:0d:6f:b3:8e:6f:ac:b6:d6: 38:ae:9e:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEGzKLGmvBi5xLyvneSCan+9hppAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU5MTA1OUI2QUYyRjVENjZFQkJEMTQwMzFEQTIzRTVB QUZDNjRGNzAeFw0yNTEyMjAxOTA2NTZaFw0yNTEyMjMyMDAwNTZaMDMxMTAvBgNV BAMTKDc5NTU2QkMwQzdDQzU3NzVBRTc3MDM4RjNEREMwMDM5ODBDQUFEOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC50LVYvMBInis1j8k2XgVjD6ka MgSIiv7gXgQFZU1dlLbyhYborXED88UBn/Z4O0It7ax7QKvP6tHVHzMmMY+aRHIV l/JcGeTWp/3evXHPzWHAr+Kg05XqjfvQSNE4Kxrm3i2bQZDVUQVkpg4mAoa4u4vT JScHW1kDU3N+PfbmpvFfTbwDnUVmll+6Iqo28+KdLmDljL7fNQkAaQ0l2fmbKUIA wErpeyqOiEOS3Tvx021eyO1BNaTkoHSqvr98oIW0w2v2u3nNsgMiG9HO6XPx1ukn YhnS+bAFKkNDi+f9MEbZYRqgkrBh5GAhsywzaF0KH5OSItjUiDMeOb+BniUVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeVVrwMfMV3WudwOPPdwAOYDKrZ0wHwYDVR0j BBgwFoAUtZEFm2ry9dZuu9FAMdoj5ar8ZPcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZGM0MWMxYS1lMDg4LTRlZjYtOWQyOC04MTRjNjE0NTZkMzAvMC9CNTkxMDU5QjZB RjJGNUQ2NkVCQkQxNDAzMURBMjNFNUFBRkM2NEY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjU5MTA1OUI2QUYyRjVENjZFQkJEMTQwMzFEQTIzRTVBQUZD NjRGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmRjNDFjMWEtZTA4OC00ZWY2LTlk MjgtODE0YzYxNDU2ZDMwLzAvQjU5MTA1OUI2QUYyRjVENjZFQkJEMTQwMzFEQTIz RTVBQUZDNjRGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABhp3pFLT78/eG0aGkkYr0kzKKEYosGd5RLa uyWWncWBnrsVSMx7oMPq1xeSmp+XrqcYkjHwXxe/C50xFddUWG+DsNpf8VwL/j14 5aNqcGhsgA4K1/qwJeoWiXv2OJmWvzVkA9E5sdU1JHMWtoLNDIYguaDhAz70XGkO xTzkE2DKJn9tCLhTmG55qe7WgoemC7bs4/a5+wwFd7MtScmHyEEZdGwldf9Dh6Wa 8MiSiDetCfPugnGjwPVlZTXW/WEaZJ7y3k2w4cSljgxqKMfixjxc9o9oQPttezAh 9wpt66DnvPGcHuW2lktKJMYlLd5mZvYFk7ANb7OOb6y21jiunvc= -----END CERTIFICATE-----Generated at Sun Dec 21 22:29:54 2025 by rpki-client